Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/97d56046-cf12-32f2-948a-53b9605ab643.roa
File:                     97d56046-cf12-32f2-948a-53b9605ab643.roa (raw, json)
Hash identifier:          8MoaF/klWS4ra4B5J7Rl18wXBr4P5DA/dDzOtka2xPs=
Subject key identifier:   3F:3E:73:A5:92:00:19:1B:BC:2C:EF:80:2F:96:74:27:E4:9C:01:A8
Certificate issuer:       /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial:       010D0C9F4328584AA160DB3870BD5BC9C0D60A20
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/97d56046-cf12-32f2-948a-53b9605ab643.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     393591
IP address blocks:        130.45.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:db:38:70:bd:5b:c9:c0:d6:0a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=4f07b107-8396-407b-893d-d2fd74a0e1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:fc:60:30:63:c4:a4:26:8a:7c:3a:a5:c2:
                    e4:8b:fb:23:ba:f7:72:73:6a:5a:11:0f:cf:1e:1a:
                    a6:71:93:58:73:24:f3:fa:31:4d:2c:a3:ed:5b:14:
                    5d:c0:35:ce:cd:1c:64:81:0b:8d:f7:a8:10:e9:0a:
                    22:a3:3e:77:60:2f:52:5b:18:a0:86:fb:ba:d3:92:
                    71:0e:f6:31:f9:6e:d3:a0:59:08:0f:fc:b8:1f:98:
                    17:88:6e:45:8b:b2:e2:4d:d4:71:d4:d4:9a:eb:b4:
                    bc:51:29:51:63:c7:86:f8:38:7d:f4:72:a4:02:d7:
                    8d:1b:f3:4f:aa:25:80:51:79:c2:b7:81:1c:4b:19:
                    24:d3:7c:22:13:54:b0:62:5a:0b:dd:59:33:73:d7:
                    c6:51:61:70:b2:15:b6:d9:7e:7c:fc:c0:43:c5:5a:
                    d1:9c:a9:66:a0:d5:07:8d:aa:a0:43:ac:77:1d:48:
                    7a:31:db:15:18:56:d4:bb:3f:dd:10:a3:6f:b9:d0:
                    7c:6e:ab:0f:7b:69:a6:14:d2:0f:90:6a:4b:38:4d:
                    41:e1:62:e2:01:43:55:80:8e:a8:c6:15:a3:f4:98:
                    f8:70:10:b9:01:f1:49:08:3c:20:d2:9b:d1:32:75:
                    a1:9e:49:d2:48:9f:86:eb:ca:b0:bb:33:88:b1:ec:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3E:73:A5:92:00:19:1B:BC:2C:EF:80:2F:96:74:27:E4:9C:01:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/97d56046-cf12-32f2-948a-53b9605ab643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl

            X509v3 Authority Key Identifier:
                keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.45.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:20:9c:9f:b5:0e:d0:a1:30:f8:8c:93:e4:a5:35:8d:8a:96:
         5b:9f:72:11:3c:90:39:76:47:46:1c:2a:ac:9d:d8:ec:aa:9c:
         5c:e1:f4:e6:05:46:13:08:d5:d5:90:20:63:3f:c7:27:ed:76:
         cd:81:4a:e2:20:c5:55:a1:5e:97:52:c5:74:5f:e9:03:e2:67:
         71:5e:88:bc:a1:b0:eb:16:0f:85:75:96:30:ac:f9:a1:1d:f2:
         4f:3a:a3:bf:6b:43:8f:b4:bb:78:52:97:b2:bc:db:f6:bc:d9:
         a5:55:ba:30:75:7a:50:0c:ef:52:cd:e2:f1:d1:85:e5:aa:e8:
         f8:47:1f:05:85:5a:eb:e7:2e:f7:49:6c:e7:d0:9d:e4:b3:56:
         6f:69:aa:9d:89:22:af:69:8e:d6:13:08:3b:bd:61:92:40:b5:
         ef:28:f3:2b:b7:a8:4a:23:64:6c:07:33:dc:2c:80:a0:f4:4b:
         43:90:02:fa:74:70:de:e2:6b:9c:34:31:0a:c1:2c:de:be:42:
         25:c8:2a:a0:8a:31:bd:ea:0c:1e:69:ad:15:1f:f4:79:38:8b:
         02:29:8f:92:c9:15:30:61:22:1b:71:db:26:31:84:da:10:dd:
         55:90:22:0e:a7:ab:c4:20:5e:c0:50:fe:02:c8:9e:05:4d:74:
         e5:eb:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:04:06 2025 by rpki-client